Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b314e3-54bf-3a8c-9a0c-01d1acc57cd6.roa
File:                     c7b314e3-54bf-3a8c-9a0c-01d1acc57cd6.roa (raw, json)
Hash identifier:          6Daj+SXpFRVynAGIKBZfGHkj+D5D+J4INm8iGUFveuE=
Subject key identifier:   B9:D5:63:28:DD:A0:8D:CB:9A:7B:22:0F:1E:8A:29:8C:CB:DD:AE:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858461C9213028F8B99F5C937F200
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b314e3-54bf-3a8c-9a0c-01d1acc57cd6.roa
Signing time:             Wed 05 Jun 2024 16:09:58 +0000
ROA not before:           Wed 05 Jun 2024 16:09:58 +0000
ROA not after:            Tue 03 Sep 2024 16:09:58 +0000
asID:                     397234
IP address blocks:        156.154.176.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 17:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:92:13:02:8f:8b:99:f5:c9:37:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun  5 16:09:58 2024 GMT
            Not After : Sep  3 16:09:58 2024 GMT
        Subject: CN=2d6e589a-c9c4-4dbf-bdef-61940ab90bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cb:c2:9f:3b:ee:7b:82:95:99:d1:72:88:70:
                    78:e8:c2:eb:ca:b2:b3:26:e6:c2:4b:f0:a5:bb:3d:
                    94:3d:11:3c:e9:87:b1:29:cb:7d:95:8f:f4:ec:8f:
                    9f:84:53:4d:6b:df:89:f7:8f:76:e1:dc:c4:3f:45:
                    98:6f:40:ca:e7:ab:78:62:17:cc:48:df:03:bf:27:
                    4b:e0:be:d8:88:31:62:fc:5f:75:7f:11:0d:60:02:
                    66:21:ff:39:93:0f:a2:67:bd:06:f2:a2:df:f7:9a:
                    c7:db:45:75:e0:02:2e:e9:0d:f3:b7:cd:1c:58:9c:
                    07:ab:b9:e4:ca:f2:46:c5:87:c7:dd:32:73:b3:e3:
                    be:4e:82:f2:6c:fc:e6:2d:d3:fa:99:2c:6b:0e:b6:
                    56:6b:40:c4:ec:44:4e:d3:c4:5c:c5:8f:b9:e3:f8:
                    9d:ef:9e:42:f3:be:f5:fb:49:48:e1:2c:09:fa:de:
                    f4:1e:0f:d6:ed:78:1d:0b:4c:e9:07:dc:ad:8b:21:
                    bb:9d:9f:53:46:f6:fb:db:dd:d0:6c:95:d6:0c:92:
                    94:f5:84:d7:e0:bb:68:b9:74:7d:c3:7e:08:6d:6a:
                    80:bb:bb:73:a3:6e:6f:c8:9a:ec:a0:f9:c2:d7:94:
                    5b:71:2d:2c:cd:63:42:1c:43:f1:09:5e:50:72:81:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:63:28:DD:A0:8D:CB:9A:7B:22:0F:1E:8A:29:8C:CB:DD:AE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b314e3-54bf-3a8c-9a0c-01d1acc57cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:21:47:71:0e:4d:a0:df:fd:94:92:c8:20:a4:e4:58:88:9a:
         9b:00:f0:49:3c:b9:e9:82:9b:0a:32:cb:b6:8e:d8:b3:b9:2d:
         1f:d4:65:8f:56:be:81:f4:45:d1:8a:8a:40:7a:53:f5:d9:30:
         4c:e8:5f:f3:ab:71:0b:45:71:ea:f0:a9:27:7d:99:33:de:e5:
         53:57:6f:80:2e:2c:30:b1:81:1e:7f:ef:ee:af:45:53:0c:ec:
         84:3f:3f:b8:71:51:08:57:23:eb:fe:29:ee:ce:5d:ea:ed:d8:
         f1:4d:7f:6d:ad:d3:b9:42:53:8b:92:fd:42:6b:26:43:a9:87:
         e2:03:5b:d6:04:b7:1d:61:c1:f9:f0:87:14:ca:4c:f3:6b:89:
         7b:54:2a:2d:87:e0:3f:ef:f0:0e:cf:2f:46:57:69:67:40:90:
         c4:ed:b3:fb:33:ce:f6:88:0a:4e:df:0c:08:80:79:99:d5:32:
         0a:7e:aa:5b:f1:d9:ba:49:f1:b3:5a:c2:bb:f9:82:17:d4:4a:
         21:8d:4c:f8:07:7a:1e:1d:70:b4:b4:54:9a:d8:1e:d3:24:2f:
         b2:be:b6:5f:14:e7:22:7b:b4:0b:b4:c0:cd:06:aa:14:ae:73:
         06:9b:30:e0:1d:4d:fe:29:7e:99:d3:42:29:d4:86:ae:b5:4c:
         25:19:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----